Personal Data Protection Policy

1. INTRODUCTION

The website ensures that user data is collected and processed in compliance with privacy regulations, in accordance with Law No. 78-17 of January 6, 1978, and the General Data Protection Regulation (GDPR – Regulation No. 2016/679).
FESTILIGHT is committed to protecting the personal data of its clients, users, and website visitors.

2. DATA CONTROLLER

The data controller is FESTILIGHT, whose registered office is located at 8 rue des Vignes – 10410 VILLECHETIF – France, SIRET No.: 414 314 898 00035.
Tel: +33 (0)3 25 83 23 00 | Email: rgpd@festilight.fr

3. PURPOSES AND LEGAL BASES FOR PROCESSING

FESTILIGHT processes personal data for the following purposes:

Newsletter management (Consent)
Contact request handling (Legitimate interest)
Personalized advertising (Consent)
Management of cookies and trackers (Legal obligation)
Security and fraud prevention (Legitimate interest)
Job application management (Consent)
Prospecting and commercial communication (Consent)
Only FESTILIGHT will have access to your personal data, which will not be sold or transferred to companies outside of FESTIGROUP (FESTILIGHT, EXPELEC, CITYLUM).

4. CATEGORIES OF PERSONAL DATA PROCESSED

The collected data includes:

– Identity: First name, last name
– Contact details: Email address, phone number
– Application documents: CV, cover letter
– Login information: IP address, cookies
– Browsing data: Pages viewed, connection duration

5. COOKIES AND TRACKERS

The website uses cookies to optimize navigation and personalize the user experience. Cookies requiring consent will be presented to the user with management options.

6. RECIPIENTS OF PERSONAL DATA

Personal data is shared only with:

Internal departments involved in the aforementioned purposes

Subcontractors for technical services (e.g., hosting, maintenance)

Administrative or judicial authorities in case of legal obligation

7. DATA RETENTION

Data is stored for the following durations:

Newsletter: Until consent is withdrawn

Contact request: As long as necessary to provide a response

Cookies: According to the duration specified in the cookie policy

8. DATA SECURITY

FESTILIGHT implements security measures to protect data from unauthorized access, loss, or destruction.

9. USER RIGHTS

In accordance with regulations, you have the following rights:

Right of access: Confirm which data is being processed

Right to rectification: Correct inaccurate information

Right to erasure: Delete data under certain conditions

Right to object: Refuse specific processing

Right to data portability: Receive your data in a structured format

You may exercise your rights by contacting rgpd@festilight.fr
Or by mail: Data Protection Officer, FESTILIGHT, 8 rue des Vignes, 10410 Villechétif, France.

10. RECRUITMENT AND CV SUBMISSION

As part of its recruitment process, FESTILIGHT allows candidates to submit their CVs via an online form. Data collected for this purpose will only be used for recruitment and retained for a maximum of 2 years after the last contact with the candidate.
Candidates may request the deletion of their data at any time by contacting rgpd@festilight.fr
Or by mail: Data Protection Officer, FESTILIGHT, 8 rue des Vignes, 10410 Villechétif, France.

11. CONTACT AND RECOURSE

For any questions regarding this policy, please contact rgpd@festilight.fr
If you believe your rights are not being respected, you may file a complaint with the CNIL (https://www.cnil.fr/).

Updated version: 05/22/2025